Event filter profile
The Event Filter Profile tab in Secret Settings displays a list of event filter profiles.
Using event filter profiles, FortiSRA can retrieve specific logs for events that occurred during an RDP session from a target.
The feature is agentless and relies on FortiSRA configuration, the WinRM service status, and the window audit policy on the target remote machine. |
For each event filter profile; name, process log, file system log, user management event log, and references are displayed.
A default default_app_log event filter profile is available. |
The Event Filter Profile tab contains the following options:
Create |
Select to create a new event filter profile. See Creating an event filter profile. |
Edit |
Select to edit the selected event filter profile. |
Delete |
Select to delete the selected event filter profiles. |
Search |
Enter a search term in the search field, then hit |